Cyber-Attacks – Page 2 – ADMIN.FOUNDATION

ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor.

·

Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Google, GTIG, Mandiant, Oracle, PeopleSoft, Security, ShinyHunters, vulnerability, WAF

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Bitget Confirms $351.6 Million Hack, Suspects North Korea’s Lazarus Group

Bitget confirms a $351.6 million theft, suspends withdrawals and says North Korea’s Lazarus Group may be involved as investigators examine the breach in detail.

·

Bitget, Blockchain, Crypto, cryptocurrency, Cyber-Attacks, Gracy Chen, Lazarus, North Korea, Security

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
China-Linked FamousSparrow Deploys SparroWocky Backdoor in Latin America

FamousSparrow is targeting Latin American governments with SparroWocky, a new C++ backdoor that exfiltrates files, takes screenshots and evades security tools.

·

backdoor, China, Cyber Attack, Cyber-Attacks, cybersecurity, FamousSparrow, Latin America, Malware, Security, SparroWocky

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Steal Identity, Vehicle Data from Latvia’s Road Traffic Safety Directorate

Hackers stole names, ID numbers, vehicle plates, addresses, and payment records belonging to 1.2 million people in Latvia’s CSDD data breach.

·

CCSD, Cyber Attack, Cyber-Attacks, Data Breach, Data Breaches, europe, GDPR, Latvia, Privacy, Security

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
OctLurk and SilkLurk Windows Backdoors Target Governments in 6 Countries

Kaspersky links OctLurk and SilkLurk to cyberespionage attacks stealing passwords, emails and files from government systems in six countries since January 2025.

·

Afghanistan, backdoor, Central Asia, China, Cyber-Attacks, Kaspersky, Linux, LurkProxy, Malware, MystRodX, OctLurk, PlugX, Security, SilentRaid, SilkLurk, Syria, TrustFall, Windows, WinRAR

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
“I’m Allowed”: Hackers Use Simple Claims to Bypass AI Guardrails

Cisco Talos found hackers using simple authorization claims to bypass AI guardrails, build DDoS attack tools, steal credentials and access live camera services.

·

AI, Android, Artificial Intelligence, Claude Code, Codex, Cursor, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, DDOS, Gemini, IoT, Security

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages

Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time.

·

Cyber Attack, Cyber-Attacks, cybersecurity, Malware, npm, Security, Shai-hulud, Supply Chain, Worm

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach

LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked to more than 12 million people.

·

Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Data Breaches, Extortion, Healthcare, LeakNet, Medical, NYCHH, Privacy, Ransomware, Security, Zohran Mamdani

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak

EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is threatening to publish the data.

·

Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Dark Web, Data Breach, Data Breaches, Ernst & Young, Extortion, EY, Security, ShinyHunters

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infections

Fake helpdesk callers use Microsoft Teams and Quick Assist to access employee computers, where attackers install new GoGRPC backdoor in suspected ransomware operations

·

BlindDoor, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Fake Support, GoGRPC, Malware, Microsoft, Microsoft Teams, Phishing Scam, PyGRPC, Quick Assist, RevSocket, RSOX, SCAM, Security, Zscaler

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

Category: Cyber-Attacks